Eric-a

名称Eric-a
注册2026-03-11
社区积分620
提交0
提交43
帖子0
点赞0
排名专家
Activity Badges
💻 Digital Nomad
🐘 Heavy User
🖖 Community Member (12x)
📤 Submitter (6x)

提交 (43)

时间轴 (43)

标识符标题提交管理条目积状态
922882Xxxxx Xx @xxxxx-xx/xxxxx-xxxx (xxxxxxx Xxxxxxxxxx Xx Xxxxxxxx Xxx @xxxxx-xx/xxxx2026-08-112026-09-13
 
0已拒绝
922881NetEase Youdao LobsterAI (lobsterai) 2026.6.15 Server-Side Request Forgery (CWE-918)2026-08-112026-09-1340332120已接受
922880CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Server-Side Request Forgery (CWE-918) / Token Exfiltration2026-08-112026-09-1340331620已接受
922879CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.1.13 Incorrect Behavior Order - Validate Before Canonicalize (CWE-180) / Authorization Bypass / Path Traversal2026-08-112026-09-1340331520已接受
922878CosmicStack Labs Mercury Agent (@cosmicstack/mercury-agent) <= 1.2.0 Incorrect Privilege Assignment (CWE-266) / Exposure of Sensitive Information (CWE-200)2026-08-112026-09-1340331420已接受
922877cosmicstack-labs mercury-agent <= 1.2.0 Exposure of Sensitive Information to an Unauthorized Actor (CWE-200)2026-08-112026-09-1340331320已接受
922876cosmicstack-labs mercury-agent <= 1.1.13 Improper Authorization (CWE-285)2026-08-112026-09-1340331220已接受
922850HKUDS nanobot <= 0.2.1 Improper Neutralization of Argument Delimiters in a Command (CWE-88)2026-08-112026-09-1340331120已接受
922849HKUDS nanobot <= 0.2.1 Incomplete List of Disallowed Inputs (CWE-184)2026-08-112026-09-1340331020已接受
922841nanocoai nanoclaw <= 2.1.17 Improper Link Resolution Before File Access / Link Following (CWE-59)2026-08-112026-09-1340330920已接受
846028Xxxxxxxxxx-xx Xxxxxxx X.x.x Xxxxxxx Xxxxxxxxxxxxxx Xxx Xxxxxxxx Xxxxxxxx (xxx-xx2026-06-022026-07-03
 
0已拒绝
845599NousResearch Hermes Agent <= v2026.5.16 Path Traversal / Improper Limitation of a Pathname to a Restricted Directory (CWE-22)2026-06-022026-07-0337614420已接受
845598NousResearch Hermes Agent <= 75cbdfd06b Improper Authentication (CWE-287)2026-06-022026-07-0337614320已接受
845596NousResearch Hermes Agent <= v2026.4.30 Insufficient Verification of Data Authenticity (CWE-345)2026-06-022026-07-0337614220已接受
845595NousResearch Hermes Agent 75cbdfd06bb041936f164c8d75ac518b2cb4fec0 Protection Mechanism Failure (CWE-693)2026-06-022026-07-0337614120已接受
844665AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)2026-06-012026-07-1137780820已接受
844659AstrBotDevs AstrBot 4.25.2 Server-Side Request Forgery (CWE-918)2026-06-012026-07-1137780720已接受
844658AstrBotDevs AstrBot 4.25.2 Code Injection (CWE-94)2026-06-012026-07-113569780重复
844656AstrBotDevs AstrBot 4.25.2 Improper Authorization (CWE-285)2026-06-012026-07-1137780620已接受
844655Xxxx Xxxxxxxx Xxxxxx-xxxxx Xx.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx 2026-06-012026-07-03
 
0已拒绝
844654Nous Research hermes-agent v2026.4.30 Improper Handling of Case Sensitivity Leading to Information Disclosure (CWE-178)2026-06-012026-07-0337613420已接受
821929zhayujie chatgpt-on-wechat <= 2.0.7 OS Command Injection (CWE-78)2026-05-072026-05-3136749320已接受
821928Xxxxxxxx Xxxxxxx-xx-xxxxxx <= X.x.x Xxxx Xxxxxxxxx (xxx-xx)2026-05-072026-05-31
 
0已拒绝
821925AstrBotDevs AstrBot 4.24.2 Path Traversal (CWE-22)2026-05-072026-05-313643810重复
821924AstrBotDevs AstrBot 4.23.6 Path Traversal (CWE-22)2026-05-072026-05-3136749220已接受
821923AstrBotDevs AstrBot 4.24.2 Insecure Direct Object Reference (CWE-639)2026-05-072026-05-3136749120已接受
821922AstrBotDevs AstrBot 4.23.6 Use of Default Credentials (CWE-1392)2026-05-072026-05-313604200重复
821921AstrBotDevs AstrBot 4.23.6 Incorrect Authorization (CWE-863)2026-05-072026-05-3136749020已接受
821920AstrBotDevs AstrBot 4.23.6 Prompt Injection (CWE-74)2026-05-072026-05-3136748920已接受
811172AstrBotDevs AstrBot latest Path Traversal (CWE-22)2026-04-232026-05-1636438120已接受
811144Xxxxxxxxxxx Xxxxx X.x.x Xxxxxxxx Xxxxxxxxxxxxxxx / Xxxxxxx Xxxxxxxxxxxxxx (xxx-x2026-04-232026-05-10
 
0已拒绝
791090Xxxxxxxxx Xxxxxx <= Xxxxxxx Xxxx Xxxxxxxxx (xxx-xx)2026-03-272026-04-19
 
0已拒绝
791089serge-chat serge <= 3cb250c Missing Authentication for Critical Function (CWE-306)2026-03-272026-04-1935822320已接受
778263Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxx Xxxxxxxxxxx Xx Xxxxxxxxx Xxxxxxxxxxxxxx Xx2026-03-122026-03-15
 
0已拒绝
778262Xxxxxxxxxx Xxxxxxx <= X.xx.x Xxxxxxxxxxxxx Xxxxxx Xxxxxxx Xxxx-xxxxxxxxxx Xxx (x2026-03-122026-03-15
 
0已拒绝
777668FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)2026-03-112026-05-0636127920已接受
777662FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)2026-03-112026-05-0636127820已接受
777661FlowiseAI Flowise <= 3.0.12 Server-Side Request Forgery (CWE-918)2026-03-112026-05-0636127720已接受
777660FlowiseAI Flowise <= 3.0.12 OS Command Injection (CWE-78)2026-03-112026-05-063587530重复
777659FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)2026-03-112026-05-0636127620已接受
777658FlowiseAI Flowise <= 3.0.12 Improperly Controlled Modification of Dynamically-Determined Object Attributes (CWE-915)2026-03-112026-05-0636127520已接受
777657FlowiseAI Flowise <= 3.0.12 Authorization Bypass Through User-Controlled Key (CWE-639)2026-03-112026-05-0636127420已接受
777656FlowiseAI Flowise <= 3.0.12 Exposure of Sensitive Information (CWE-200)2026-03-112026-05-0636127320已接受

◂ 上一步一览下一步 ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!